Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: uT5KF7L8GLo+httcFt03lFU0Ingbpmz1yuuvnw2InOc=
Subject key identifier: E3:51:2C:FD:2A:81:43:1C:A7:8E:75:A9:F4:A2:80:09:30:0E:05:8A
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 0194BD85AA4E70FB93A0288ACB109A51D4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: dP2uYN6B6Yft+ZDtFEJ6Hm2nsOhERjRezduQmALrmBU=)
2: lcycvAbT-2PUUx_keEjD_rzNQVg.roa (hash: ohYpD8zllBNGHneXiioDVg0sD783EBRieTug607OnxU=)
3: oAvccpdYptAzS_BGXpnm48hNKj0.roa (hash: UcqHCV81R5HjZRazwae448gGQvQVwy5vVk7J2zutre4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:aa:4e:70:fb:93:a0:28:8a:cb:10:9a:51:d4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=e3512cfd2a81431ca78e75a9f4a28009300e058a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ed:38:69:8c:95:fd:1e:db:27:98:35:07:22:
41:ca:3d:ce:49:a0:77:d7:a1:1f:53:9a:b0:3d:46:
e1:63:18:37:e6:21:df:e1:08:c7:94:f5:a3:50:33:
2e:81:f3:2f:4d:a0:59:17:cf:90:94:91:68:88:58:
fb:54:9f:fc:20:ef:b9:9c:dd:39:a5:f8:6e:3d:ee:
26:b9:51:c7:68:6e:d8:5c:5b:28:2c:d6:3a:a7:5f:
35:3f:47:56:c7:66:cf:c2:41:9b:c8:8e:ce:58:29:
aa:8d:7c:ab:03:0c:83:a4:7d:72:20:7b:77:7d:79:
5f:85:c3:df:ec:43:6b:bc:2f:ba:1d:a8:9a:a1:e7:
28:e8:b7:f7:e8:ec:ba:22:62:68:a5:39:36:5f:4f:
6d:8c:f3:dc:bf:b3:ba:30:75:cd:28:e0:b1:d2:f6:
84:73:4c:79:00:14:e3:90:25:31:f5:39:30:a2:4f:
2b:de:81:32:65:5b:55:da:8b:42:fa:6c:65:90:7c:
8a:85:61:28:60:6f:fd:d8:89:b6:99:ef:ab:19:b8:
7e:d6:3f:bb:6e:f4:a8:c6:11:73:b2:e6:e2:1d:17:
62:c1:80:e9:99:60:fb:f3:3f:78:d3:c9:f8:4a:10:
da:b8:18:0c:bf:48:98:e3:fb:7d:b0:fe:cb:0e:a9:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:51:2C:FD:2A:81:43:1C:A7:8E:75:A9:F4:A2:80:09:30:0E:05:8A
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:13:ac:6d:d2:2a:40:08:2b:46:4d:58:63:aa:e1:6b:7a:f7:
26:6d:2d:48:e2:9b:5d:e2:8b:16:7f:2c:0e:e8:ad:59:2b:07:
05:c1:90:80:15:0e:f9:88:7a:71:2d:22:d8:7a:81:44:2d:c6:
7f:89:9c:a9:3d:69:37:df:b3:12:c1:07:c4:95:57:9f:c8:8d:
79:80:24:f5:35:6d:f0:fc:a0:7d:31:bb:da:d6:79:0f:08:3f:
cb:f0:79:2a:66:1c:1b:66:84:4b:a0:94:25:1c:d0:02:c3:43:
ce:db:96:3a:55:0a:11:82:6f:2b:d0:ee:e8:5c:2d:79:1d:ad:
7b:81:f7:5a:69:b2:4b:b4:d5:f4:3d:67:ad:88:8d:16:aa:07:
13:f6:8d:07:20:53:99:a6:43:d7:97:41:f3:e5:5b:c9:6f:6a:
bd:5d:df:f3:5d:77:f0:b3:21:4a:aa:2f:11:81:80:30:e1:65:
57:a1:eb:85:5b:4c:9d:a4:91:7b:5f:02:c7:c9:36:99:f4:db:
5b:95:bd:f6:73:b1:4a:6c:38:c8:16:96:2c:47:40:48:67:2b:
e7:cb:3e:bf:93:20:e6:87:8f:b0:09:80:d4:de:5f:3c:1a:20:
71:fd:52:91:fd:47:c1:4a:f9:ba:e8:64:5f:82:2a:62:d7:75:
ea:62:dc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:31 2025 by rpki-client